|
THREE
Original Sin
Nyrk grjjnfiu uzu Z xzmv kf jvk lg re rttflek fe Kyv Rib?
A
fter I figured out how to obtain unpublished numbers, finding out
information about people—friends, friends of friends, teachers, even
strangers—held a fascination for me. The Department of Motor Vehicles is
a great storehouse of information. Was there any way I could tap it?
For openers, I simply called a DMV office from the pay phone in a
restaurant and said something like, “This is Officer Campbell, LAPD, Van
Nuys station. Our computers are down, and some officers in the field need a
couple of pieces of information. Can you help me?”
The lady at the DMV said, “Why aren’t you calling on the law
enforcement line?”
Oh, okay—there was a separate phone number for cops to call. How
could I find out the number? Well, obviously the cops at the police station
would have it, but… was I really going to call the police station to get
information that would help me break the law? Oh, yeah.
Placing a call to the nearest station house, I said I was from the Los
Angeles County Sheriff’s Department, we needed to call the DMV, and the
officer who had the number for the law enforcement desk was out. I needed
the operator to give me the number. Which she did. Just like that.
(As I was recounting this story recently, I thought I still remembered that
DMV law enforcement phone number or could still get it. I picked up the
phone and dialed. The DMV has a Centrex phone system, so all the
numbers have the same area code and prefix: 916-657. Only the extension
number—the last four digits—varies by department. I just chose those last
digits at random, knowing I’d get
somebody
at the DMV, and I’d have
credibility because I was calling an internal number.
The lady who answered said something I didn’t get.
I said, “Is this the number for law enforcement?”
She said, “No.”
“I must have dialed wrong,” I said. “What’s the number for law
enforcement?”
She gave it to me! After all these years, they still haven’t learned.
After phoning the DMV’s law enforcement line, I found there was a second
level of protection. I needed a “Requester Code.” As in the past, I needed to
come up with a cover story on the spur of the moment. Making my voice
sound anxious, I told the clerk, “We’ve just had an urgent situation come up
here, I’ll have to call you back.”
Calling the Van Nuys LAPD station, I claimed to be from the DMV and
said I was compiling a new database. “Is your Requester Code 36472?”
“No, it’s 62883.”
(That’s a trick I’ve discovered very often works. If you ask for a piece of
sensitive information, people naturally grow immediately suspicious. If you
pretend you already have the information and give them something that’s
wrong, they’ll frequently correct you—rewarding you with the piece of
information you were looking for.)
With a few minutes’ worth of phone calls, I had set myself up for getting
the driver’s license number and home address of anyone in the state of
California, or running a license plate and getting the details such as the
owner’s name and address, or running a person’s name and getting details
about his or her car registration. At the time it was just a test of my skills; in
the years ahead the DMV would be a rich lode that I would use in myriad
ways.
All these extra tools I was accumulating were like the sweet at the end of a
meal. The main course was still my phone phreaking. I was calling a lot of
different Pacific Telephone and General Telephone departments, collecting
information to satisfy that “What information can I get?” urge, making calls
to build my knowledge bank of the companies’ departments, procedures,
and lingo and routing my calls through some long-distance carriers to make
them harder to trace. Most of this from my mom’s phone in our
condominium.
Of course phreakers like to score points by showing other phreakers
what new things they’ve learned how to do. I loved pulling pranks on
friends, phreakers or not. One day I hacked into the phone company switch
serving the area where my buddy Steve Rhoades lived with his
grandmother, changing the “line class code” from residential to pay phone.
When he or his grandmother tried to place a call, they would hear, “Please
deposit ten cents.” Of course he knew who had done it, and called to
complain. I promised to undo it, and I did, but changed the service to a
prison pay phone. Now when they tried to make a call, an operator would
come on the line and say, “This will be a collect call. What is your name,
please.” Steve called to say, “Very funny—change it back.” I had my
laughs; I changed it back.
Phone phreakers had discovered a way to make free phone calls, taking
advantage of a flaw in some types of “diverters”—devices that were used to
provide call forwarding (for example, to an answering service) in the days
before call forwarding was offered by the phone companies. A phreaker
would call at an hour when he knew the business would be closed. When
the answering service picked up, he would ask something like, “What hours
are you open?” When the person who had answered disconnected the line,
the phreaker would stay on; after a few moments, the dial tone would be
heard. The phreaker could then dial a call to anywhere in the world, free—
with the charges going to the business.
The diverter could also be used to receive incoming calls for call-backs
during a social-engineering attack.
In another approach with the diverter, the phreaker dialed the “automatic
number identification,” or ANI number, used by phone company
technicians, and in this way learned the phone number for the outgoing
diverter line. Once the number was known, the phreaker could give out the
number as “his” callback. To answer the line, the phreaker just called the
business’s main number that diverted the call. But this time, when the
diverter picked up the second line to call the answering service, it
effectively answered the incoming call.
I used this way of talking with my friend Steve late one night. He
answered using the diverter line belonging to a company called Prestige
Coffee Shop in the San Fernando Valley.
We were talking about phone phreaking stuff when suddenly a voice
interrupted our conversation.
“We are monitoring,” the stranger said.
Steve and I both hung up immediately. We got back on a direct
connection, laughing at the telephone company’s puny attempt to scare us,
talking about what idiots the people who worked there were. The same
voice interrupted again:
Do'stlaringiz bilan baham: |
